EP2073444B1

EP2073444B1 - Terminal detection authentication method, device and operational management system in passive optical network

Info

Publication number: EP2073444B1
Application number: EP08773171.7A
Authority: EP
Inventors: Wei Wu; Hai Gao
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Technologies Co Ltd
Priority date: 2007-07-13
Filing date: 2008-07-11
Publication date: 2013-09-11
Anticipated expiration: 2028-07-11
Also published as: US20170230737A1; US10986427B2; US20200037054A1; US20180213308A1; US9942634B2; EP2073444A4; US20130163989A1; US20140255030A1; ES2437328T3; WO2009009999A1; CN101083589A; US8406628B2; US20100040371A1; PL2073444T3; US8774629B2; EP2073444A1; CN101083589B; US9674172B2; US9397777B2; US10455304B2

Description

CROSS-REFERENCE TO RELATED APPLICATIONS

This application claims priority to International Application No. PCT/CN2008/071619, filed on July 11, 2008 , which claims the priority benefit of Chinese Patent Application No. 200710119103.X, filed on July 13, 2007 .

FIELD OF TECHNOLOGY

The present invention relates to a network communication technology, in particular, to a method, equipment, and operation management system for detecting and authenticating a terminal in a passive optical network (PON).

BACKGROUND

The PON technique is a point-to-multipoint optical fiber access technique. A PON is generally composed of an optical line terminal (OLT) at the central office end, an optical network unit/optical network terminal (ONU/ONT) at the user end, and an optical distribution network (ODN). One PON port of the OLT may be accessed by a plurality of ONUs/ONTs. The difference between the ONU and the ONT lies in that the ONT is directly located at the user side, while other networks exist between the ONU and the user side, such as the Ethernet, there-between.
Currently, the detection and authentication on the ONU/ONT are performed during the registration of the ONU/ONT, and the registration process of the ONU/ONT is shown in Figure 1.
In Figure 1, Step 1: The OLT sends a message to each ONU/ONT for requesting the ONU/ONT to report a serial number (SN).
Step 2: The ONU/ONT that receives the above message reports its SN to the OLT.
Step 3: The OLT receives the SN, and detects the SN, i.e. detects the ONU/ONT. The detection process is implemented as follows. An SN is pre-configured in the OLT, and the OLT determines whether the received SN matches with the pre-configured SN. The detection on the ONU/ONT succeeds if the received SN matches with the pre-configured SN; the detection on the ONU/ONT fails if the received SN does not match with the pre-configured SN. The OLT sends an ONU-ID corresponding to the SN according to a corresponding relationship between the pre-configured SN and the ONU-ID to the ONU/ONT that is successfully detected. The ONU-ID is unique at one PON port.
Step 4: The OLT performs ranging on the ONU/ONT assigned with the ONU-ID.
Step 5: The OLT sends a request message to the ONU/ONT on which the ranging is performed, for requesting the ONU/ONT to report a password.
Step 6: The ONU/ONT that receives the request message reports its password to the OLT.
Step 7: The OLT performs authentication on the ONU/ONT according to the received password, and if the authentication is passed, the registration of the ONU/ONT succeeds.
During the implementation of the present invention, the inventor finds out the following defects in the prior art.
In the abovementioned detection and authentication on the ONU/ONT, a corresponding relationship between the SN and the ONU-ID should be statically pre-configured in the OLT. Therefore, the OLT cannot automatically detect and authenticate the ONU/ONT, so that the flexibility of the detection and authentication of the ONU/ONT is poor. In addition, the SN in the OLT is usually managed by an operation management system. When providing the ONU/ONT to the user, the operation management system records the SN of the provided ONU/ONT, and pre-configures the SN in the OLT. When it is intended to replace the ONU/ONT due to problems such as equipment failure, the operation management system updates the SN recorded in the operation management system, and updates the SN in the OLT. That is to say, the operation management system adopts a static management scheme for the SN recorded in the operation management system and the SN in the OLT. This static management scheme results in an increased maintenance cost of the operation management system, the OLT, and the ONU/ONT, and thus reduces the maintainability of the operation management system, the OLT, and the ONU/ONT.
EP 1458164 A2 discloses methods and apparatuses for authentication of optical network units in an Ethernet Passive Optical Network (EPON). Based on link security method is provided by allowing OLT to implement of a RADIUS server to authenticate ONUs. Particularly, logic link identifier (LLID) of an optical network unit (ONU) as an identifier of the ONU is requested by the OLT from the ONU and used to determine whether the authentication succeeds or fails. Paper by SUN-SIK ROH et al, titled "Design of Authentication and Key Exchange Protocol in Ethernet Passive Optical Networks" 23 April 2004(2004-04-23), COMPUTATIONAL SCIENCE AND ITS APPLICATIONS A ICCSA 2004;[LECTURE NOTES IN COMPUTER SCIENCE;;LNCS], SPRINGER-VERLAG,BERLIN/HEIDELBERG, PAGE(S) 1035-1043, XP019006729 discloses a design of authentication and key exchange protocol in Ethernet Passive Network (EPON). User authentication is performed after ONU registration and ONU authentication. A public key cipher method is used for authentication and session key exchange. Especially, the identification of the ONU is checked by the OLT and the identifier of the OLT is checked by the ONU to determine whether the verification is success.
KR 2005 0003642 A discloses a method for realizing an ONU activation. In the first stage, a request frame containing a request field is generated and the request frame is transmitted to the ONU to be activated. In the second stage, after finishing the operation, the ONU that receives the request frame generates and transmits a window frame serving as a response to the request frame.

SUMMARY

Accordingly, various embodiments of the present invention provide a method, equipment, and operation management system for detecting and authenticating a terminal in a passive optical network, which realizes the automatic detection and authentication of the terminal, thereby improving the flexibility of terminal detection and authentication as well as enhancing the maintainability of the central office end and the terminal.
In an embodiment of the present invention, a method for detecting and authenticating a terminal in the passive optical network is provided. The passive optical network includes an optical line terminal (OLT) and a plurality of optical network units/optical network terminals (ONUs/ONTs). The method includes the following steps.
The OLT receives and stores a logic registration code of an ONU/ONT from an operation management system, wherein the logic registration code from the operation management system is assigned for the ONU/ONT used by a user who files a service application.
The OLT receives the logic registration code sent by the ONU/ONT.
The OLT judges whether the logic registration code sent by the ONU/ONT matches with a logic registration code stored at the OLT, and determines that the ONU/ONT is a valid ONU/ONT if the logic registration code sent by the ONU/ONT matches with the logic registration code stored at the OLT.
The OLT records a terminal serial number from the valid ONU/ONT and a terminal identifier assigned to the valid ONU/ONT. The logic registration code of the ONU/ONT is different from the terminal identifier of the ONU/ONT.
In an embodiment of the present invention, an optical line terminal (OLT) applied to a central office end in the passive optical network is further provided. The OLT includes a first storing module, a receiving module, a determining module, an assigning module, and a second storing module.
The first storing module is adapted to store a logic registration code of a terminal wherein the logic registration code stored in the first storing module is configured by an operation management system at the central office end and assigned for the terminal used by a user who files a service application.
The receiving module is adapted to receive a logic registration code and a terminal serial number sent by the terminal.
The judging module is adapted to judge whether the logic registration code received by the receiving module matches with the logic registration code stored in the first storing module, and output a judgment result.
The assigning module is adapted to assign a terminal identifier to the terminal and output the terminal identifier.
The second storing module is adapted to store the terminal serial number received by the receiving module and the terminal identifier output by the assigning module after the judging module outputs the matched judgment result information. The logic registration code of the ONU/ONT is different from the terminal identifier of the ONU/ONT.
In an embodiment of the present invention, a system including a passive optical network is further provided. The passive optical network includes an optical line terminal (OLT) and a plurality of optical network units/optical network terminals (ONUs/ONTs).
The OLT is adapted to receive a logic registration code of an ONU/ONT from an operation management system and store the logic registration code from the operation management system, wherein the logic registration code from the operation management system is assigned for the ONU/ONT used by a user who files a service application.
the OLT is adapted to receive the logic registration code sent by the ONU/ONT, judge whether the logic registration code sent by the ONU/ONT matches with a logic registration code stored at the OLT, and record a terminal serial number acquired from the ONU/ONT and a terminal identifier assigned to the ONU/ONT if the logic registration code sent by the ONU/ONT matches with the logic registration code stored at the OLT.
The receiving and storing module is adapted to receive and store a logic registration code of the terminal equipment.
The transmitting module is adapted to transmit the logic registration code stored in the receiving and storing module to a central office end according to a request of the central office end received by the terminal equipment.
Seen from the above technical solutions, in the embodiments of the present invention, it is unnecessary to statically configure the terminal serial number at the central office end. Instead, a logic registration code is adopted during the detection and authentication process, so that after the authentication is passed, the terminal serial number acquired from the valid terminal and the terminal identifier assigned to the valid terminal are recorded, and thus the central office end may automatically detect and authenticate the terminal. Besides, by recording the terminal serial number acquired from the valid terminal and the terminal identifier assigned to the valid terminal by the central office end, the central office end may dynamically manage the terminal serial number and the terminal identifier, so as to reduce the maintenance cost of the central office end and the terminal. Therefore, the technical solutions provided by the embodiments of the present invention not only improve the flexibility of terminal detection and authentication but also enhance the maintainability of the central office end and the terminal.

BRIEF DESCRIPTION OF THE DRAWINGS

Figure 1 is a schematic view illustrating a registration process of an ONU/ONT in the prior art;
Figure 2 is a schematic view illustrating the process of a method for detecting and authenticating a terminal according to an embodiment of the present invention;
Figure 3 is a first timing chart of the method for detecting and authenticating a terminal according to an embodiment of the present invention; and
Figure 4 is a second timing chart of the method for detecting and authenticating a terminal according to an embodiment of the present invention.

DETAILED DESCRIPTION

In an embodiment of the present invention, a logic registration code of a terminal is employed to realize the automatic detection and authentication of the terminal. The method for detecting and authenticating a terminal provided in the embodiments of the present invention is illustrated in detail below.
In the embodiments of the present invention, the terminal, such as an ONU/ONT, has a corresponding logic registration code. The logic registration code of the terminal may be assigned by a central office end to the terminal during a service application of a user. After assigning the logic registration code to the terminal, the central office end needs to record the logic registration code assigned to the terminal. For example, an operation management system at the central office end assigns a logic registration code to the terminal, stores the assigned logic registration code, and transmits the logic registration code that is assigned to the terminal to an OLT at the central office end. Then, the OLT stores the received logic registration code. The logic registration code may be dynamically generated by the central office end. Moreover, the logic registration code is unique within a certain range. For example, under a PON port, the logic registration code of the terminal is unique. The logic registration code of the terminal may also be unique in the global range. In the embodiments of the present invention, it is not limited whether or not the logic registration code of the terminal has a unique range, what the specific implementation manner of the logic registration code is, or which specific equipment at the central office end is adapted to generate the logic registration code.
During the terminal detection and authentication process, the terminal first acquires the logic registration code thereof, and then transmits the acquired logic registration code to the central office end. In order to acquire the logic registration code, the terminal may receive an externally input logic registration code. For example, local command lines, Web pages, or other means may be provided in the terminal to receive the externally input logic registration code. The terminal may also generate the logic registration code based on a certain predetermined rule according to the externally input information. In this manner, the logic registration code generated by the terminal is identical to the logic registration code stored at the central office end. The terminal detection and authentication process may be accomplished during the registration of the terminal. More specifically, the terminal may transmit the logic registration code to the central office end during the registration. In the embodiments of the present invention, it is possible that the terminal detection and authentication process is realized independently or along with other processes.
The terminal may transmit the logic registration code to the central office end by using an existing message, or by using a new message specially defined for transmitting the logic registration code. Moreover, during the transmission of the logic registration code, the terminal may transmit the logic registration code by the encryption means or by other means. In the embodiments of the present invention, the specific implementation manner of the existing message and the specific structure of the newly defined message are not limited herein.
After receiving the logic registration code transmitted from the terminal, the central office end performs authentication on the terminal by using the pre-stored logic registration code and the logic registration code transmitted from the terminal. For example, the central office end determines whether the logic registration code transmitted from the terminal matches with the pre-stored logic registration code, and determines that the terminal is a valid terminal if the logic registration code sent from the terminal matches with the logic registration code stored at the central office end; determines that the terminal is an invalid terminal if the logic registration code sent from the terminal dose not match with the logic registration code stored at the central office end.
When judging that the terminal is a valid terminal, the central office end records the terminal serial number acquired from the valid terminal and the terminal identifier assigned to the valid terminal by the central office end. In the embodiments of the present invention, the terminal serial number of the valid terminal recorded at the central office end is acquired from the valid terminal. In view of this, in the embodiments of the present invention, it is unnecessary to pre-configure the terminal serial number at the central office end. Though, in the embodiments of the present invention, the logic registration code of the terminal is pre-configured at the central office end, when the terminal needs to be replaced due to problems such as a failure, the logic registration code in the original terminal may also be used in the newly replaced terminal, and the central office end performs authentication on the terminal based on the logic registration code. Therefore, the central office end may automatically detect the valid terminal, and automatically acquire the terminal serial number and the terminal identifier of the valid terminal. As such, the process of statically configuring the serial number of the newly replaced terminal by the central office end during the terminal replacement by the user can be avoided.
The central office end may record the terminal identifier of the terminal in the following manners. For example, the central office end may assign the terminal identifier to the terminal before determining that the terminal is the valid terminal, and record the terminal identifier of the valid terminal after determining that the terminal is the valid terminal. Or, the central office end may assign the terminal identifier to the terminal after determining that the terminal is the valid terminal, and record the terminal identifier of the valid terminal. Furthermore, the central office end may assign a temporary terminal identifier to the terminal before determining that the terminal is the valid terminal, then assign a formal terminal identifier to the terminal after determining that the terminal is the valid terminal, and record the formal terminal identifier of the valid terminal. The temporary terminal identifier assigned to the terminal may satisfy certain requirements of the registration or ranging of the terminal. For example, when the terminal transmits the logic registration code through a message for reporting a password, the terminal is first assigned with a temporary terminal identifier to accomplish the subsequent ranging process, and then transmits the logic registration code to the central office end through the message for reporting a password.
The process of recording the terminal serial number of the valid terminal by the central office end may be realized in the following manner. The OLT records the terminal serial number of the valid terminal, or the OLT and other equipments at the central office end such as the operation management system all record the terminal serial number of the valid terminal. The OLT may acquire and record the terminal serial number of the valid terminal by receiving the terminal serial number transmitted from the valid terminal. The OLT may transmit the recorded terminal serial number of the valid terminal to other network equipments such as the operation management system at the central office end, such that the operation management system may acquire and record the automatically detected terminal serial number by receiving the terminal serial number of the valid terminal transmitted from the OLT.
The operation management system is capable of managing the terminal serial number and the terminal identifier recorded thereby, and also performing maintenance management on the OLT and the terminal according to the terminal serial number and the terminal identifier recorded thereby.
The method for detecting and authenticating a terminal provided in the embodiments of the present invention is illustrated in detail below with the accompanying drawings.
The process of the method for detecting and authenticating a terminal according to the embodiments of the present invention is shown in Figure 2.
In Figure 2, Step 1: The operation management system generates and stores a logic registration code for an ONU/ONT used by the user who files a service application. For example, the operation management system stores the generated logic registration code in a logic registration code database. The operation management system may generate the logic registration code in a specific format determined by the operation management system. When the operation management system generates the logic registration code, it is ensured that the generated logic registration code is unique under a PON port.
Step 2: The operation management system generates a service parameter to be configured for the ONU/ONT according to the service applied by the user. The operation management system delivers the service parameter to be configured for the ONU/ONT and the logic registration code of the ONU/ONT to the OLT.
Step 3: The operation management system transmits information about the logic registration code of the ONU/ONT to the user.
Step 4: After being powered on, the ONU/ONT receives the externally input logic registration code. For example, the ONU/ONT receives the externally input logic registration code by providing local command lines, Web pages, or through other external media.
Step 5: The ONU/ONT reports the logic registration code to the OLT during the registration. The OLT receives the logic registration code reported by the ONU/ONT, and determines whether the logic registration code reported by the ONU/ONT matches with the logic registration code stored therein. If the logic registration code reported by the ONU/ONT matches with the logic registration code stored therein, the authentication succeeds and the OLT determines that the ONU/ONT is the valid terminal and records the SN acquired from the valid terminal and an ONU-ID (the terminal identifier) assigned to the valid terminal, as a result, the OLT successfully detects the valid terminal. If the logic registration code reported by the ONU/ONT does not match with the logic registration code stored therein, the authentication fails, and the OLT determines that the ONU/ONT is the invalid terminal, as a result, the registration of the terminal terminates.
Step 6: After the registration of the ONU/ONT succeeds, the OLT reports the detected terminal SN transmitted from the valid terminal to the operation management system. The OLT may also report a corresponding relationship between the SN and the terminal identifier to the operation management system.
Step 7: The operation management system stores the received terminal SN, for example, in an SN database. The operation management system may perform maintenance management on the OLT and the ONU/ONT according to the stored terminal SN.
In the above Step 5, the ONU/ONT may transmit the logic registration code through a message for reporting a password, i.e. the ONU/ONT carries the logic registration code in a parameter field of the message for reporting a password, and reports the message for reporting a password to the OLT. The logic registration code may also be transmitted between the OLT and the ONU/ONT through a newly set message for requesting a logic registration code or a message for reporting a logic registration code. The newly set message for requesting a logic registration code and the message for reporting a logic registration code are both physical layer operation and maintenance (PLOAM) messages. The structures of the aforementioned two newly defined PLOAM messages are shown in Tables 1 and 2. Table 1 PLOAM message for requesting a logic registration code by the OLT in the downlink direction

Message for Requesting Logic Registration Code

Byte Content Description

1 ONU-ID ONU/ONT ID Index

2 Message ID Message ID

3-12 Reserved

In Table 1, the ONU-ID of the first byte is configured to carry the ONU-ID assigned to the terminal by the central office end, the Message ID of the second byte is configured to identify the message as a message for requesting a logic registration code, and the third to the twelfth bytes are reserved bytes.

Table 2 PLOAM message for reporting a logic registration code by the OLT in the uplink direction

Message for Reporting Logic Registration Code
Byte	Content	Description
1	ONU-ID	ONU/ONT ID Index
2	Message ID	Message ID
3	Xxxxxxxx	Logic Registration Code (Byte1)
4∼11	...	...
12	Xxxxxxxx	Logic Registration Code (Byte 10)

In Table 2, the ONU-ID of the first byte is configured to carry the ONU-ID assigned to the terminal by the central office end, the Message ID of the second byte is configured to identify the message as a message for reporting a logic registration code, and the third to the twelfth bytes are configured to carry the logic registration code of the terminal.
Tables 1 and 2 merely show specific examples of the message for requesting a logic registration code and the message for reporting a logic registration code. In the embodiments of the present invention, the message for transmitting the logic registration code is not limited to the above examples.
The aforementioned Step 5 may be realized by the following two methods.
Method 1: an automatic terminal detection and authentication process of first assigning a temporary ONU-ID and then assigning a formal ONU-ID is shown in Figure 3.
In Figure 3, Step 1: The OLT sends a message for requesting to report the SN to all the ONUs/ONTs.
Step 2: The ONU/ONT receives the message for requesting to report the SN sent by the OLT, and reports its SN to the OLT in response to the message.
Step 3: The OLT receives the SN reported by the ONU/ONT, and determines whether the SN has been recorded, i.e. determines whether the received SN matches with the stored SN. If the OLT determines that the received SN has been recorded, Step 9 is performed. If the OLT determines that the received SN has not been recorded, the OLT assigns a temporary ONU-ID to the ONU/ONT and sends the temporary ONU-ID to the ONU/ONT, and Step 4 is performed. When the ONU/ONT assigns the temporary ONU-ID, the OLT may select one from the unused ONU-IDs as the temporary ONU-ID.
Step 4: The OLT performs data interaction with the ONU/ONT to which the temporary ONU-ID is assigned, so as to accomplish the ranging of the ONU/ONT assigned with the temporary ONU-ID.
Step 5: The OLT sends a message for requesting a logic registration code to the ONU/ONT, and the message for requesting a logic registration code may be realized by a message for requesting a password or a newly defined message for requesting a logic registration code.
Step 6: The ONU/ONT receives the message for requesting a logic registration code sent by the OLT, and reports its logic registration code to the OLT. The ONU/ONT may carry the logic registration code in a message for reporting a password and transmit the message to the OLT, or carry the logic registration code in a newly defined message for reporting a logic registration code and transmit the message to the OLT.
Step 7: The OLT acquires the logic registration code of the ONU/ONT from the received message, and checks the acquired logic registration code according to parameters pre-configured by the operation management system, i.e. the OLT determines whether the acquired logic registration code matches with the logic registration code stored therein. If the acquired logic registration code matches with the logic registration code stored therein, the OLT determines that the ONU/ONT is the valid terminal, then records the SN of the ONU/ONT, and terminates the registration of the ONU/ONT, and Step 8 is performed. If the acquired logic registration code does not match with the logic registration code stored therein, the OLT determines that the ONU/ONT is the invalid terminal, then directly terminates the registration, and stops performing the subsequent process.
Step 8: The ONU/ONT logs on again to continue the subsequent registration process, and the ONU/ONT reports its SN to the OLT. The OLT receives the SN reported by the ONU/ONT, and checks whether the SN has been recorded. If the OLT determines that the received SN has been recorded, Step 9 is performed; and if the OLT determines that the received SN has not been recorded, the OLT assigns a temporary ONU-ID to the ONU/ONT and sends the temporary ONU-ID to the ONU/ONT, and Step 4 is performed.
In Step 8, as the OLT has already recorded the SN of the ONU/ONT, Step 9 is performed directly.
Step 9: The OLT finds out a corresponding ONU-ID, and adopts the corresponding ONU-ID as a formal ONU-ID. The formal ONU-ID may be the temporary ONU-ID, i.e. the OLT adopts the temporary ONU-ID assigned previously to the ONU/ONT as the formal ONU-ID of the ONU/ONT. The OLT may bind the SN of the ONU/ONT with the formal ONU-ID of the ONU/ONT.
Step 10: The OLT assigns the found formal ONU-ID to the ONU/ONT.
Step 11: The OLT performs data interaction with the ONU/ONT to which the formal ONU-ID is assigned, so as to accomplish the ranging of the ONU/ONT assigned with the formal ONU-ID.
Step 12: The OLT performs data interaction with the ONU/ONT to which the formal ONU-ID is assigned, so as to accomplish the registration of the ONU/ONT, and after the registration succeeds, Step 13 is performed.
Step 13: The OLT performs data interaction with the ONU/ONT that succeeds in the registration, so as to configure service parameters for the ONU/ONT that succeeds in the registration.
In the above description of Figure 3, the logic registration code of the ONU/ONT may be the ONU-ID of the ONU/ONT, i.e. in the above Step 6 shown in Figure 3, the logic registration code reported to the OLT by the ONU/ONT is the ONU-ID of the ONU/ONT. That is to say, in the above Step 1 shown in Figure 2, the logic registration code generated by the operation management system for the ONU/ONT used by the user who files the service application is the ONU-ID.
Certainly, in the above description of Figure 3, the logic registration code of the ONU/ONT is different from the ONU-ID of the ONU/ONT. In the embodiments of the present invention, the specific implementation manner of the logic registration code of the ONU/ONT is not limited herein.
In addition, in the above description of Figure 3, the operation management system and the OLT may identify the terminal through a management terminal identifier, and the OLT and the ONU/ONT may identify the terminal through the ONU-ID. The management terminal identifier may adopt the ONU-ID or any other identifier. When the management terminal identifier between the operation management system and the OLT adopts the ONU-ID, the operation management system, the OLT, and the ONU/ONT all employ the ONU-ID to identify the ONU/ONT.
Method 2: the process of first assigning the ONU-ID and then automatically detecting and authenticating the terminal is shown in Figure 4.
In Figure 4, Step 1: The OLT sends a message for requesting to report the SN to all the ONUs/ONTs.
Step 2: The ONU/ONT receives the message for requesting to report the SN sent by the OLT, and reports its SN to the OLT in response to the message.
Step 3: After receiving the SN reported by the ONU/ONT, the OLT selects one from the unused ONU-IDs as a formal ONU-ID, and assigns the selected ONU-ID to the ONU/ONT.
Step 4: The OLT performs data interaction with the ONU/ONT to which the ONU-ID is assigned, so as to accomplish the ranging of the ONU/ONT assigned with the ONU-ID.
Step 5: The OLT sends a message for requesting a logic registration code to the ONU/ONT, and the message for requesting a logic registration code may be realized by a message for requesting a password or a newly defined message for requesting a logic registration code.
Step 6: The ONU/ONT receives the message for requesting a logic registration code sent by the OLT, and reports its logic registration code to the OLT in response to the message. The ONU/ONT may carry the logic registration code in a message for reporting a password and transmit the message to the OLT, or carry the logic registration code in a newly defined message for reporting a logic registration code and transmit the message to the OLT.
Step 7: The OLT acquires the logic registration code of the ONU/ONT from the received message, and checks the acquired logic registration code according to parameters pre-configured by the operation management system, i.e. the OLT determines whether the acquired logic registration code matches with the logic registration code stored therein. If the acquired logic registration code matches with the logic registration code stored therein, the OLT determines that the ONU/ONT is the valid terminal, then records the serial number of the ONU/ONT, and binds the serial number of the ONU/ONT with the ONU-ID of the ONU/ONT, and Step 8 is performed. If the acquired logic registration code does not match with the logic registration code stored therein, the OLT determines that the ONU/ONT is the invalid terminal, then directly terminates the registration, and stops performing the subsequent process.
Step 8: The OLT performs data interaction with the valid ONU/ONT, so as to accomplish the registration of the ONU/ONT, and after the registration succeeds, Step 9 is performed.
Step 9: The OLT performs data interaction with the ONU/ONT that succeeds in the registration, so as to configure service parameters for the ONU/ONT that succeeds in the registration.
Step 10: When intending to log out, the ONU/ONT sends a log-out message to the OLT.
Step 11: The OLT receives the log-out message sent by the ONU/ONT, and releases the binding between the SN of the ONU/ONT and the ONU-ID of the ONU/ONT.
In the above description of Figure 4, the operation management system and the OLT may identify the terminal through a management terminal identifier, and the OLT and the ONU/ONT may identify the terminal through the ONU-ID. The management terminal identifier may adopt the ONU-ID or any other identifier. When the management terminal identifier between the operation management system and the OLT does not adopt the ONU-ID, the OLT in Step 7 binds the SN of the ONU/ONT, the ONU-ID of the ONU/ONT, and the management terminal identifier of the ONU/ONT, and in Step 11, the OLT releases the binding of the SN of the ONU/ONT, the ONU-ID of the ONU/ONT, and the management terminal identifier of the ONU/ONT.
Seen from the above description of the method, in the embodiments of the present invention, it is unnecessary to statically configure the terminal serial number in the OLT at the central office end or the operation management system. Instead, a logic registration code is adopted during the detection and authentication process, so that after the authentication is passed, the terminal serial number acquired from the valid terminal and the terminal identifier assigned to the valid terminal are recorded, and thus the OLT at the central office end may automatically detect and authenticate the terminal. Besides, the OLT transmits the terminal serial number and the terminal identifier acquired through automatic detection and authentication to the operation management system, so that the operation management system may dynamically acquire the terminal serial number and the terminal identifier, and the process of statically configuring the terminal serial number and the terminal identifier by the operation management system is avoided. When the terminal needs to be replaced due to problems such as a failure, the logic registration code in the original terminal may also be used in the newly replaced terminal, and thereby the process of statically reconfiguring the terminal serial number by the operation management system due to the replacement of the terminal is avoided. Based on the above, the operation management system may dynamically manage the terminal serial number and the terminal identifier, and easily maintain the OLT and the terminal by using the dynamically acquired terminal serial number and the terminal identifier. Therefore, the maintenance cost of the operation management system, the OLT, and the terminal is lowered, the flexibility of terminal detection and authentication is improved, and the maintainability of the central office end and the terminal is also enhanced.
In an embodiment of the present invention, a network equipment located at the central office end in the PON is also provided. The network equipment may be an OLT at the central office end, and includes a first storing module, a receiving module, a judging module, an assigning module, and a second storing module.
The first storing module is adapted to store a logic registration code of a terminal. The logic registration code stored in the first storing module may be configured by an operation management system at the central office end.
The receiving module is adapted to receive a logic registration code and a terminal serial number sent from the terminal. The receiving module may request the terminal serial number and the logic registration code from the terminal, and then receive the terminal serial number and the logic registration code transmitted from the terminal according to the request.
The judging module is adapted to judge whether the logic registration code received by the receiving module matches with the logic registration code stored in the storing module, so as to judge whether the terminal is the valid terminal or not. The judging module outputs a judgment result, i.e. the judging module outputs information about matching or not matching.
The assigning module is adapted to assign and output the terminal identifier to the terminal. The assigning module may assign the terminal identifier to the terminal before or after the judgment of the judging module.
The second storing module is adapted to store the terminal serial number received by the receiving module and the terminal identifier output by the assigning module after the judging module outputs the judgment result of matching. The terminal serial number and the terminal identifier stored in the second storing module are the automatically detected terminal serial number and the terminal identifier of the valid terminal.
The network equipment optionally includes a reporting module. The reporting module is adapted to report the terminal serial number stored by the second storing module to the operation management system at the central office end. The terminal serial number reported by the reporting module to the operation management system is the terminal serial number of the valid terminal automatically detected by the network equipment where the module is located.
According to different implementations of realizing the automatic detection and authentication, the above assigning module and receiving module also have different operation modes. Two specific implementation methods are illustrated as examples below.
Method 1: The assigning module includes a judging sub-module and an assigning sub-module, and the receiving module includes a first requesting sub-module, a second requesting sub-module, and a receiving sub-module.
The first requesting sub-module sends a message for requesting to report the SN to all the ONUs/ONTs. The receiving sub-module receives the SN reported by the ONU/ONT. After the receiving sub-module receives the SN reported by the ONU/ONT, the judging sub-module determines whether the SN received by the receiving sub-module has been recorded in the second storing module, i.e. determines whether the received SN matches with the SN stored in the second storing module. If it is determined that the SN received by the receiving sub-module has been recorded by the second storing module, the judging sub-module notifies the assigning sub-module to assign a formal ONU-ID, and if it is determined that the SN received by the receiving sub-module has not been recorded by the second storing module, the judging sub-module notifies the assigning sub-module to assign a temporary ONU-ID.
After receiving the message of assigning the temporary ONU-ID from the judging sub-module, the assigning sub-module assigns the temporary ONU-ID to the terminal, and triggers the network equipment to perform ranging on the terminal. The network equipment performs data interaction with the ONU/ONT to which the temporary ONU-ID is assigned, so as to accomplish the ranging of the ONU/ONT assigned with the temporary ONU-ID.
After the network equipment accomplishes the ranging, the second requesting sub-module sends a message for requesting a logic registration code to the ONU/ONT. The message for requesting a logic registration code may be realized by a message for requesting a password or a newly defined message for requesting a logic registration code. The receiving sub-module acquires the logic registration code reported by the ONU/ONT from the received message.
After the receiving sub-module receives the logic registration code, the judging module checks the logic registration code received by the receiving sub-module according to the logic registration code stored in the first storing module, i.e. the judging module determines whether the logic registration code received by the receiving sub-module matches with the logic registration code stored in the first storing module. The judging module determines that the ONU/ONT is the valid terminal and notifies the second storing module to record the SN of the ONU/ONT, if the logic registration code received by the receiving sub-module matches with the logic registration code stored in the first storing module; the judging module determines that the ONU/ONT is the invalid terminal and directly terminates the registration process, if the logic registration code received by the receiving sub-module does not match with the logic registration code stored in the first storing module.
The ONU/ONT logs on again to perform the subsequent registration process, and the ONU/ONT reports its SN to the OLT. After the receiving sub-module receives the SN reported by the ONU/ONT, the judging sub-module checks whether the SN has been recorded in the second storing module. If it is determined that the SN received by the receiving sub-module has been recorded in the second storing module, the judging sub-module notifies the assigning sub-module to assign the formal ONU-ID to the terminal. If it is determined that the SN received by the receiving sub-module has not been recorded in the second storing module, the judging sub-module notifies the assigning sub-module to assign the temporary ONU-ID to the terminal.
During the re-log on of the terminal, the second storing module has recorded the SN of the ONU/ONT. Therefore, after the receiving sub-module receives the SN, the assigning sub-module finds out the ONU-ID, then assigns the found ONU-ID to the terminal as the formal ONU-ID, and triggers the network equipment to perform ranging on the terminal.
The network equipment performs data interaction with the ONU/ONT to which the formal ONU-ID is assigned, so as to accomplish the ranging of the ONU/ONT assigned with the formal ONU-ID. The network equipment performs data interaction with the ONU/ONT to which the formal ONU-ID is assigned, so as to accomplish the registration of the ONU/ONT. After the registration succeeds, the OLT performs data interaction with the ONU/ONT that succeeds in the registration, so as to assign service parameters to the ONU/ONT that succeeds in the registration. In addition, when the management terminal identifier between the operation management system and the OLT adopts the ONU-ID, the second storing module stores the binding relationship between the SN and the ONU-ID.
Method 2: The receiving module includes a first requesting sub-module, a third requesting sub-module, and a receiving sub-module.
The first requesting sub-module sends a message for requesting to report the SN to all the ONUs/ONTs. The receiving sub-module receives the SN reported by the ONU/ONT. After the receiving sub-module receives the SN reported by the ONU/ONT, the assigning module assigns the ONU-ID to the terminal, and triggers the network equipment to perform ranging on the terminal. The network equipment performs data interaction with the ONU/ONT to which the ONU-ID is assigned, so as to accomplish the ranging of the ONU/ONT assigned with the ONU-ID.
After the network equipment accomplishes the ranging, the third requesting sub-module sends a message for requesting a logic registration code to the ONU/ONT. The message for requesting a logic registration code may by realized by a message for requesting a password or a newly defined message for requesting a logic registration code. The receiving sub-module acquires the logic registration code reported by the ONU/ONT from the received message.
After the receiving sub-module receives the logic registration code, the judging module checks the logic registration code received by the receiving sub-module according to the logic registration code stored in the first storing module, i.e. the judging module determines whether the logic registration code received by the receiving sub-module matches with the logic registration code stored in the first storing module. The judging module determines that the ONU/ONT is the valid terminal and notifies the second storing module to record the SN of the ONU/ONT, if the logic registration code received by the receiving sub-module matches with the logic registration code stored in the first storing module; the judging module determines that the ONU/ONT is the invalid terminal and directly terminates the registration process, if the logic registration code received by the receiving sub-module does not match with the logic registration code stored in the first storing module.
The network equipment performs data interaction with the ONU/ONT to which the formal ONU-ID is assigned, so as to accomplish the registration of the ONU/ONT. After the registration succeeds, the OLT performs data interaction with the ONU/ONT that succeeds in the registration, so as to assign service parameters to the ONU/ONT that succeeds in the registration.
When logging out, the ONU/ONT sends a log-out message to the OLT. After the OLT receives the log-out message sent by the ONU/ONT, the second storing module releases the information about the ONU/ONT stored therein. When the management terminal identifier between the operation management system and the OLT does not adopt the ONU-ID, the information about the ONU/ONT stored in the second storing module includes the binding relationship of the SN of the ONU/ONT, the management terminal identifier of the ONU/ONT, and the ONU-ID of the ONU/ONT.
In an embodiment of the present invention, an operation management system at the central office end in the PON is further provided. The system includes a logic registration code module and a serial number module.
The logic registration code module is adapted to store the logic registration code, assign the logic registration code to the user, and transmit the logic registration code assigned to the user to the OLT. The logic registration code module may transmit the logic registration code and the service parameters to the OLT. The detailed description is given in the above implementation manner of the method.
The serial number module is adapted to receive the SN of the valid terminal transmitted by the OLT. The SN transmitted by the OLT is the SN of the valid terminal automatically detected by the OLT. The serial number module may store the received SN in an SN database. The operation management system also includes a module for managing the SN.
In an embodiment of the present invention, a terminal equipment in the PON is further provided. The terminal equipment includes a receiving and storing module and a transmitting module.
The receiving and storing module is adapted to receive, store, and input the logic registration code of the terminal equipment where the module is located. The receiving and storing module may receive the externally input logic registration code by using local command lines and Web pages provided by the terminal equipment or by others manners. The detailed description is given in the above implementation manner of the method.
The transmitting module is adapted to send the logic registration code stored in the receiving and storing module to the central office end according to the request of the central office end received by the terminal equipment where the module is located. For example, the transmitting module carries the logic registration code in a message for reporting a password and transmits the message to the OLT. Or, the transmitting module carries the logic registration code in a newly defined message specialized for transmitting a logic registration code and transmits the message to the OLT. The detailed description is given in the above implementation manner of the method.
Finally, it should be understood that the above embodiments are only used to explain, but not to limit the technical solution of the present invention. In despite of the detailed description of the present invention with referring to above embodiments, it should be understood that various modifications, changes or equivalent replacements can be made by those skilled in the art without departing from the scope of the present invention and covered in the claims of the present invention.

Claims

A method for detecting and authenticating a terminal in a passive optical network comprising an optical line terminal, OLT, and a plurality of optical network units/optical network terminals, ONUs/ONTs, the method comprising:
receiving, by the OLT, a logic registration code of an ONU/ONT from an operation management system, wherein the logic registration code from the operation management system is assigned for the ONU/ONT used by a user who files a service application;

storing, by the OLT, the logic registration code from the operation management system;

receiving, by the OLT, a logic registration code sent by the ONU/ONT;

judging, by the OLT, whether the logic registration code sent by the ONU/ONT matches with the logic registration code stored at the OLT;

determining that the ONU/ONT is a valid ONU/ONT if the logic registration code sent by the ONU/ONT matches with the logic registration code stored at the OLT; and

recording, by the OLT, a terminal serial number from the valid ONU/ONT and a terminal identifier assigned by the OLT to the valid ONU/ONT, wherein the logic registration code of the ONU/ONT is different from the terminal identifier of the ONU/ONT.
The method according to claim 1, wherein before determining, by the OLT, that the ONU/ONT is the valid ONU/ONT, the method further comprises:
assigning, by the OLT, a temporary terminal identifier to the ONU/ONT, wherein the temporary terminal identifier is adapted to meet requirements of the ONU/ONT in registration or ranging process.
The method according to claim 2, wherein the terminal identifier assigned to the valid ONU/ONT is a formal terminal identifier of the ONU/ONT, and the formal terminal identifier of the ONU/ONT is based on the temporary terminal identifier or selected from unused terminal identifiers.
The method according to claim 1, wherein the recording, by the OLT, the terminal serial number from the valid ONU/ONT and the terminal identifier assigned to the valid ONU/ONT comprises:
binding, by the OLT, the terminal serial number of the valid ONU/ONT with the terminal identifier of the valid ONU/ONT; and the method further comprises:
when receiving an off-line message sent by the valid ONU/ONT, releasing, by the OLT, a binding relationship between the terminal serial number of the valid ONU/ONT and the terminal identifier of the valid ONU/ONT.
The method according to claim 1, wherein the receiving, by the OLT, the logic registration code sent by the ONU/ONT comprises:
receiving, by the OLT, a message for reporting a password, the message carrying the logic registration code sent by the ONU/ONT, and acquiring the logic registration code from the message for reporting the password; or

receiving, by the OLT, a physical layer operation and maintenance message for reporting the logic registration code sent by the ONU/ONT, and acquiring the logic registration code from the physical layer operation and maintenance message for reporting the logic registration code.
The method according to any one of claims 1 to 5, wherein the logic registration code stored at the OLT is assigned by an operation management system.
The method according to claim 6, the method further comprising:
transmitting, by the OLT, the terminal serial number and the terminal identifier acquired through automatic detection and authentication to the operation management system.
An optical line terminal, OLT, applied to a central office end in a passive optical network, the OLT comprising:
a first storing module adapted to store a logic registration code of a optical network unit/optical network terminal, ONU/ONT, wherein the logic registration code stored in the first storing module is configured by an operation management system at the central office end and assigned for the ONU/ONT used by a user who files a service application;

a receiving module adapted to receive a logic registration code and a terminal serial number sent by the ONU/ONT;

a judging module adapted to judge whether the logic registration code received by the receiving module matches with the logic registration code stored in the first storing module and output a judgment result;

an assigning module adapted to assign a terminal identifier to the ONU/ONT and output the terminal identifier; and

a second storing module adapted to store the terminal serial number received by the receiving module and the terminal identifier output by the assigning module after the judging module outputs matched judgment result information

wherein the logic registration code of the ONU/ONT is different from the terminal identifier of the ONU/ONT.
The OLT according to claim 8, wherein
the assigning module comprises:
a judging sub-module adapted to judge whether the terminal serial number received by the receiving module is recorded in the terminal serial number stored in the second storing module and output a judgment result;

an assigning sub-module adapted to assign a formal terminal identifier to the terminal after the judging sub-module outputs a recorded judgment, or assign a temporary terminal identifier to the terminal after the determining sub-module outputs an unrecorded judgment result; and trigger a ranging process of the network equipment; and

the receiving module comprises:
a first requesting sub-module adapted to request the terminal serial number of the ONU/ONT;

a second requesting sub-module adapted to request the logic registration code of the ONU/ONT after the network equipment in which the second requesting sub-module is located finishes a ranging of the terminal assigned with the temporary terminal identifier; and

a receiving sub-module adapted to receive the logic registration code and the serial number of the ONU/ONT.
The OLT according to claim 8, wherein the receiving module comprises:
a first requesting sub-module adapted to request the terminal serial number of the ONU/ONT;

a third requesting sub-module adapted to request the logic registration code of the ONU/ONT after a receiving sub-module receives the serial number of the ONU/ONT, the assigning module assigns the terminal identifier to the ONU/ONT and the network equipment in which the second requesting sub-module is located finishes a ranging of the ONU/ONT assigned with the temporary terminal identifier; and

a receiving sub-module adapted to receive the logic registration code and the serial number of the ONU/ONT.
The OLT according to claim 8, further comprising:
a reporting module adapted to report the terminal serial number stored in the second storing module to an operation management system of the central office end.
A system comprising a passive optical network, the passive optical network comprising an optical line terminal, OLT, and a plurality of optical network units/optical network terminals, ONUs/ONTs, characterized in that
the OLT is adapted to receive a logic registration code of an ONU/ONT from an operation management system and store the logic registration code from the operation management system, wherein the logic registration code from the operation management system is assigned for the ONU/ONT used by a user who files a service application;
the OLT is adapted to receive the logic registration code sent by the ONU/ONT, judge whether the logic registration code sent by the ONU/ONT matches with a logic registration code stored at the OLT, and record a terminal serial number acquired from the ONU/ONT and a terminal identifier assigned to the ONU/ONT if the logic registration code sent by the ONU/ONT matches with the logic registration code stored at the OLT;
wherein the logic registration code of the ONU/ONT is different from the terminal identifier of the ONU/ONT.
The system according to claim 12, wherein the OLT is adapted to receive a message for reporting a password, the message carrying the logic registration code, and acquire the logic registration code from the message for reporting the password; or
the OLT is adapted to receive a physical layer operation and maintenance, PLOAM, message for reporting the logic registration code, and acquire the logic registration code from the PLOAM message for reporting the logic registration code.
The system according to claim 12 or 13, wherein the OLT is adapted to assign and send a temporary terminal identifier to the ONU/ONT, wherein the temporary terminal identifier is adapted to meet requirements of the terminal in registration or ranging process; and
the OLT is adapted to assign a formal terminal identifier to the ONU/ONT and bind the terminal serial number sent by the ONU/ONT with the formal terminal identifier of the ONU/ONT, wherein the formal terminal identifier of the ONU/ONT is based on the temporary terminal identifier or selected from unused terminal identifiers.
The system according to claim 14, wherein the OLT is adapted to release a binding relationship between the terminal serial number of the valid ONU/ONT and the terminal identifier of the valid ONU/ONT when receiving an off-line message sent by the valid ONU/ONT.